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DETAILED ACTION 



Restriction to one of the following inventions is required under 35 U.S. C. 121: 

I. Claims 1, 8, 9, 10 are drawn to a system for granting rights and allocating and 
deallocating security registers to said directories as classified in class 726 subclass 
6. 

II. Claims 2, 4 are drawn to a method for allocating registers, seeking secrets, and 
verifying knowledge of one or more rights as classified in class 713, subclass 161. 

III. Claim 3 is drawn to a method removing a security register when a new directory 
is selected except if the selected new directory is a child of the current directory 
as classified in class 713, subclass 157. 

IV. Claim 5 is drawn to a method for verifying that presentation of the secret has 
succeeded, and granting rights associated with the secret. Where if the secret 
does not exist checking subsequent levels, as classified in class 726, subclass 30. 

V. Claims 6 drawn to a method to authorize a function requiring knowledge of a 
secret where a first secret is known to at least one of the applications along a path 
in the hierarchy for which the application containing the secret are delimiters as 
classified in class 713, subclass 182. 

VI. Claims 7 drawn to a method seeking the existence of a reference secret, and 
refusing and terminating the verification if the secret exists within the current 
application as classified in class 726, subclass 17. 
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VII. Claims 11-15 drawn to a system with a smart device where each security register 
contains all rights or secrets which have been granted under the allocated 
directory as classified in class 726, subclass 20. 

Inventions I- VII are related as subcombinations disclosed as usable together in a single 
combination. The subcombinations are distinct from each other if they are shown to be 
separately usable. See MPEP § 806. 05(d). The inventions are distinct, each from the 
other because of the following reasons: 

Iln the instant case, the combination as claimed does not require the particulars of the 
subcombination as claimed because the combination teaches allocation of security 
registers. It does not show the specifics of the subcombinations. 

Group 2 teaches seeking secrets, and verifying knowledge of one or more rights as can be 
used in data authentication. 

Group 3 teaches removing a security register when a new directory is selected except if 
the selected new directory is a child of the current directory as can be used in hierarchal 
directory structures. 

Group 4 teaches verifying that presentation of the secret has succeeded, and granting 
rights associated with the secret as can be used in access control. 

Group 5 teaches authorizing a function requiring knowledge of a secret where a first 
secret is known to at least one of the applications along a path in the hierarchy for which 
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the application containing the secret are delimiters as can be used in systems with 
delimiters and prerequisite knowledge of a secret. 

Group 6 teaches seeking the existence of a reference secret, and refusing and terminating 
the verification if the secret exists within the current application as can be used in 
application verification. 

Group 7 teaches a system with a smart device where each security register contains all 
rights or secrets which have been granted under the allocated directory which can be used 
in physical token systems. 

Because these inventions are distinct for the reasons given above and have acquired a 
separate status in the art as shown by their different classification, restriction for 
examination purposes as indicated is proper. 

Because these inventions are distinct for the reasons given above and the search required 
for any one Group is not required for any other Group, restriction for examination 
purposes as indicated is proper. 

Because these inventions are distinct for the reasons given above and have acquired a 
separate status in the art because of their recognized divergent subject matter, restriction 
for examination purposes as indicated is proper. 

Applicant is reminded that upon the cancellation of claims to a non-elected invention, the 
inventorship must be amended in compliance with 37 CFR 1 .48(b) if one or more of the 
currently named inventors is no longer an inventor of at least one claim remaining in the 
application. Any amendment of inventorship must be accompanied by a request under 37 
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CFR 1 .48(b) and by the fee required under 37 CFR 1 . 17(i). 

Applicant is advised that the reply to this requirement to be complete must include an 
election of the invention to be examined even though the requirement be traversed (37 
CFR 1.143). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Christopher J. Brown whose telephone number is 
(571)272-3833. The examiner can normally be reached on 8:30-6:00. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on (571)272-381 1. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO 
Customer Service Representative or access to the automated information system, call 
800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
/Christopher J Brown/ 
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